permit nopass keepenv { PATH JUNK } nobody as root cmd echo args okay
